Also i would expect banks to use some sort of 2FA where you have to manually confirm any transaction on your mobile device, or enter a code generated from there into your computer.

No security measure is perfect. When doing security-sensitive things, it’s better to wait when you’re home on an uncompromised network.

But yes, the chances of something happening is very small, even when using an unknown network.